Scam email #250427 - Your user is part of the hitwheeste spoof design to spoof and sent us spam: [Contact us ] dogsnipsenon dogsnipsenon

Email info

The email was sent on 2018-05-16 11:03:37 and appeared to be from info@mbgoilfield.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to info@mbgoilfield.com which was the scammer's actual email address.
It was probably sent from in Unknown, United Kingdom

Email header

Your content is below the advert

The scam

Your email is part of the hitwheese spoof attack.
Until your email, we have never heard of your site before.
Gobi.com.sg was hit with hitwheeste ddos attack meant to overwhelm our email server which is a repository for our cake orders and gmail correspondences.
For more on what we have found out on the attack http://zifsoft.com/2018/04/28/hitwheeste-ddos/
We would appreciate if you could help us look into this. Your email was triggered by a fake registration. Please check your forms.
Hitwheeste ddos attack starts with unsecured forms (ours was ninja forms) and unchallenged comments. you should take steps to secure them
-----------------------------------------------------------
---original email header---
Return-Path: <info@mbgoilfield.com>
X-Original-To: info@gobi.com.sgDelivered-To: x14518238@homiemail-mx20.g.dreamhost.comReceived: from ns105.webmasters.com (unknown [208.64.136.151])
by homiemail-mx20.g.dreamhost.com (Postfix) with SMTP id 1D36D480967C5
for <info@gobi.com.sg>; Tue, 15 May 2018 22:31:08 -0700 (PDT)
Received: (qmail 19229 invoked by uid 2526); 16 May 2018 05:31:17 -0000
Date: 16 May 2018 05:31:17 -0000
Message-ID: <20180516053117.19220.qmail@ns105.webmasters.com>
To: info@gobi.com.sgSubject: [Contact us ] dogsnipsenon dogsnipsenon
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes
Content-Transfer-Encoding: 8Bit
X-Mailer: Drupal
Errors-To: info@mbgoilfield.comSender: info@mbgoilfield.comFrom: info@mbgoilfield.com

-----------------------------------------------------------
Thank you for contacting us, we shall revert back soon...

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above messageThe email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgementYou can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the senderPlease do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)